I have filebeat installed on a WIndows machine. My file contain the result of a sql request. So the file is always truncated and contain either 0 line or 1 line.
But when the file contains just one line, filebeat doesn't send event. I see in the log file :
INFO Non-zero metrics in the last 30s: filebeat.harvester.closed=1 filebeat.harvester.files.truncated=1 filebeat.harvester.open_files=-1 filebeat.harvester.running=-1 publish.events=1 registrar.states.update=1 registrar.writes=1 2017-09-20T10:24:25+02:00 INFO No non-zero metrics in the last 30s 2017-09-20T10:24:41+02:00 INFO Harvester started for file: C:\temp\trace.txt
But when i add an empty line before or after the line I want the event is sent.
Do you know why ?
Thanks in advance.